Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
File:                     6JI0wYCkzDSzuzF1cyszA8ES_DM.mft (raw, json)
Hash identifier:          dqKTE0iLlp4ikFNYzwdyp02+HyMw2ovy9ipFvRcXJGo=
Subject key identifier:   67:C5:5A:BE:E8:45:93:C4:00:1D:51:1C:D7:07:16:56:0C:BC:3E:33
Authority key identifier: E8:92:34:C1:80:A4:CC:34:B3:BB:31:75:73:2B:33:03:C1:12:FC:33
Certificate issuer:       /CN=e89234c180a4cc34b3bb3175732b3303c112fc33
Certificate serial:       01A1DD94F6D6D390D4A0F3F31D9077A66AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JI0wYCkzDSzuzF1cyszA8ES_DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
Manifest number:          0170
Signing time:             Sun 15 Nov 2026 05:01:29 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:29 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:29 +0000
Files and hashes:         1: 6JI0wYCkzDSzuzF1cyszA8ES_DM.crl (hash: Kz+jojEPNJ57TAdFpw7Cv9Mkyievc1aCGOwuptRaF6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JI0wYCkzDSzuzF1cyszA8ES_DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:f6:d6:d3:90:d4:a0:f3:f3:1d:90:77:a6:6a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89234c180a4cc34b3bb3175732b3303c112fc33
        Validity
            Not Before: Nov 15 05:01:29 2026 GMT
            Not After : Nov 16 05:01:29 2026 GMT
        Subject: CN=67c55abee84593c4001d511cd70716560cbc3e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:48:97:56:dd:65:0f:b0:f1:8b:e9:11:4d:
                    a1:de:0a:ce:93:70:a4:92:5d:b4:55:7e:23:0f:2b:
                    3d:dc:81:93:3e:34:3f:71:08:0a:07:f6:59:39:17:
                    6d:33:6c:c8:c0:33:4c:83:bc:88:a3:df:66:fd:3d:
                    0d:64:b6:fb:2d:b3:48:3d:69:d3:4d:fe:19:59:68:
                    06:eb:c4:ca:b8:dd:da:31:84:19:7c:c0:ba:70:c0:
                    2c:b7:74:c9:1b:72:d6:49:2a:72:ce:eb:ba:a8:13:
                    67:51:01:9a:83:de:18:45:10:27:c2:db:4c:74:d4:
                    fd:2b:7a:e5:56:f6:9b:93:07:68:1f:83:14:34:e5:
                    6f:e9:4c:8c:38:ed:d8:db:6e:99:7e:04:34:fa:ce:
                    32:a5:1c:e5:81:b5:db:cd:e4:c8:54:88:1e:0d:d9:
                    fa:ae:5b:c5:a6:72:2d:dd:b0:6a:33:5a:71:0f:04:
                    da:d8:0a:72:89:93:3e:c0:9b:a3:3b:90:ff:11:fb:
                    ed:1c:55:1b:fa:2f:86:88:06:4e:c9:1c:63:73:21:
                    96:03:c3:6f:7a:8e:4a:4d:2f:fb:cf:27:13:28:39:
                    60:3c:38:f7:41:d6:51:e8:68:d0:e1:52:c7:04:4b:
                    17:32:10:09:cf:bb:8a:d3:dc:32:84:c3:c6:b0:29:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C5:5A:BE:E8:45:93:C4:00:1D:51:1C:D7:07:16:56:0C:BC:3E:33
            X509v3 Authority Key Identifier:
                keyid:E8:92:34:C1:80:A4:CC:34:B3:BB:31:75:73:2B:33:03:C1:12:FC:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JI0wYCkzDSzuzF1cyszA8ES_DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f3:28:7f:44:c6:1d:01:b3:5f:9a:98:5e:ea:8f:14:df:70:
         bb:8d:2d:5b:2e:d1:87:61:fe:18:c8:b9:c6:b6:02:9f:64:34:
         0c:ed:56:f7:04:de:50:5b:ce:76:64:08:7a:ba:83:34:a4:7e:
         66:7a:76:77:11:20:24:0a:b6:fd:fe:5b:71:1a:fb:15:1e:fa:
         68:db:88:9e:97:bf:ab:db:9d:09:c9:65:3b:51:5d:47:59:da:
         a1:41:7b:b7:f6:46:0a:5e:bd:8c:da:a7:6a:06:42:90:0f:38:
         25:67:d1:f7:84:c9:8e:65:5b:78:f5:38:d2:42:62:57:56:06:
         f2:08:d9:83:10:02:19:3d:29:96:19:a9:03:c1:c5:03:a6:79:
         84:a0:7b:ba:07:6a:77:08:34:02:d7:3f:ca:85:44:5a:a8:2e:
         44:a0:2d:bf:00:3b:1f:27:36:00:14:41:69:42:7c:30:7f:4b:
         3e:a4:58:a2:77:cc:91:ba:44:bd:1b:1c:9b:bf:82:78:9d:83:
         8e:a4:6e:3c:2d:a9:43:c7:35:17:da:f8:bd:87:37:eb:86:90:
         3f:8b:59:a9:e4:8d:94:1d:a9:93:a9:45:f3:4e:98:99:fe:f4:
         34:f6:41:03:3d:43:47:ae:18:0b:8a:8e:fe:5b:1c:a2:a7:ce:
         25:00:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:47 2026 by rpki-client